[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMZDA0kPgfoU16PPPElteb7WMU2eChWpFHETBuUOub5I":3,"g5a-risk:CVE-2016-3704":151},{"success":4,"data":5,"meta":149},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":38,"epssPercentile":14,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":52,"references":53,"referencesCount":99,"weaknesses":100,"weaknessesCount":104,"isActivelyExploited":105,"cisaInfo":14,"otxData":14,"relatedBlogPosts":106,"seoMetadata":107,"configurations":132,"relatedVendorCves":147,"notableEvents":148},"CVE-2016-3704","What is CVE-2016-3704?","Pulp before 2.8.5 uses bash's $RANDOM in an unsafe way to generate passwords.","2017-06-13T17:29:00.177","2025-04-20T01:37:25.86",7.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":15,"CVSSMetricV2":28,"CVSSMetricV40":14},null,[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":12,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"TemporalSeverity":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"ModifiedAttackVector":14,"ModifiedAttackComplexity":14,"ModifiedPrivilegesRequired":14,"ModifiedUserInteraction":14,"ModifiedScope":14,"ModifiedConfidentialityImpact":14,"ModifiedIntegrityImpact":14,"ModifiedAvailabilityImpact":14,"EnvironmentalScore":14,"EnvironmentalSeverity":14},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",3.9,3.6,[29],{"Source":17,"Type":18,"CVSSData":30,"BaseSeverity":35,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":14,"ObtainAllPrivilege":14,"ObtainUserPrivilege":14,"ObtainOtherPrivilege":14,"UserInteractionRequired":14},{"Version":31,"VectorString":32,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":33,"AvailabilityImpact":23,"BaseScore":34,"BaseSeverity":14,"Exploitability":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"CollateralDamagePotential":14,"TargetDistribution":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"EnvironmentalScore":14},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.0198,[38,38,38,38,38,38,38],"High",[42,47],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"fedoraproject","fedora","24","cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"pulpproject","pulp","*","cpe:2.3:a:pulpproject:pulp:*:*:*:*:*:*:*:*",2,[54,58,63,68,73,76,80,85,87,89,91,93,95,97],{"url":55,"source":56,"tags":57},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:0336","Red Hat",[],{"url":59,"source":56,"tags":60},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1330264",[61,62],"Issue Tracking","Patch",{"url":64,"source":65,"tags":66},"https:\u002F\u002Fdocs.pulpproject.org\u002Fuser-guide\u002Frelease-notes\u002F2.8.x.html#pulp-2-8-5","Pulpproject",[67],"Permissions Required",{"url":69,"source":70,"tags":71},"https:\u002F\u002Fgithub.com\u002Fpulp\u002Fpulp\u002Fblob\u002Fpulp-2.8.2-1\u002Fserver\u002Fbin\u002Fpulp-qpid-ssl-cfg#L25","GitHub",[61,62,72],"Third Party Advisory",{"url":74,"source":70,"tags":75},"https:\u002F\u002Fgithub.com\u002Fpulp\u002Fpulp\u002Fblob\u002Fpulp-2.8.2-1\u002Fserver\u002Fbin\u002Fpulp-qpid-ssl-cfg#L97-L105",[61,62,72],{"url":77,"source":78,"tags":79},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FYM2LCC7QBRCK4LTN5EZT5OHTVAR3MYTY\u002F","Fedoraproject",[],{"url":81,"source":82,"tags":83},"https:\u002F\u002Fpulp.plan.io\u002Fissues\u002F1858","Plan",[61,62,84],"Vendor Advisory",{"url":55,"source":56,"tags":86},[],{"url":59,"source":56,"tags":88},[61,62],{"url":64,"source":65,"tags":90},[67],{"url":69,"source":70,"tags":92},[61,62,72],{"url":74,"source":70,"tags":94},[61,62,72],{"url":77,"source":78,"tags":96},[],{"url":81,"source":82,"tags":98},[61,62,84],14,[101],{"id":102,"name":102,"description":103},"Unknown","CWE-255",1,false,[],{"title":108,"metaDescription":109,"keywords":110,"canonicalUrl":111,"structuredData":112},"What is CVE-2016-3704? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-3704, a high severity cyber security vulnerability from 2017. Pulp before 2.8.5 uses bash's $RANDOM in an unsafe way to ge...","CVE-2016-3704, CVE-2016-3704 vulnerability, CVE-2016-3704 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, fedoraproject security, pulpproject security, fedora vulnerability, pulp vulnerability","\u002Fwhat-is\u002Fcve-2016-3704",{"@context":113,"@type":114,"headline":108,"description":109,"datePublished":9,"dateModified":10,"author":115,"publisher":119,"about":123,"mainEntityOfPage":127,"articleSection":130,"keywords":131},"https:\u002F\u002Fschema.org","TechArticle",{"@type":116,"name":117,"url":118},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":116,"name":117,"url":118,"logo":120},{"@type":121,"url":122},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":124,"name":6,"description":125,"additionalType":126},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":128,"@id":129},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-3704","Cybersecurity","CVE-2016-3704, CVE-2016-3704 vulnerability, CVE-2016-3704 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[133,140],{"Operator":14,"Negate":14,"Nodes":134},[135],{"Operator":136,"Negate":14,"CPEMatch":137},"OR",[138],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":139,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"C729D5D1-ED95-443A-9F53-5D7C2FD9B80C",{"Operator":14,"Negate":14,"Nodes":141},[142],{"Operator":136,"Negate":14,"CPEMatch":143},[144],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":145,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":146},"624B8EA6-C98B-4161-A8CA-7C566FFDD46D","2.8.4",[],[],{"lastModified":10,"cacheTime":150,"version":31},1792266325932,{"score":152,"band":153,"action":154,"scoredAt":155},47,"Medium","Plan remediation","2026-10-16T06:42:01.852913+00:00"]